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Abstract 

We investigate the question if quantum algorithms exist that compute the 
maximum of a set of conjugated elements of a given number field in quantum 
polynomial time. We will relate the existence of these algorithms for a certain family 
of number fields to an open conjecture from elementary number theory. 
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1 Introduction 

Let Q(r)/Q be a Galois extension with Galois group G and define Fmax '■= niaxo-{ IF"'! }, 
with a G G. We ask if there exists an algorithm that, given some description of F, 
efficiently computes a (p G G, such that IF'p] = Fmax- 

The first problem we encounter in this general setting is that two conjugated ele- 
ments might not be efficiently distinguishable, i. e., for a, p G G, the difference HF'^I — |Ff|| 
may become very small. We will avoid this problem by defining, for a positive integer 
t G N, the set: 

MAXF|G|,t := {o- G G | |FVF„.axl > 1 - 1/(log IGD^, (1) 

and ask for an efficient computation of an element cp G MAXF|e| say, the number of 
steps being a polynomial in log |G|. 

In this article, we will relate the existence of these algorithms for a certain family 
of number fields to an open conjecture from elementary number theory in a sense that 
either algorithms of this kind exist or the conjecture is true or both. 

To state the conjecture, we introduce the Fermat quotient c|p(lc], where p is an 
odd prime and k G Z with (k,p) = 1 , to be the smallest integer greater or equal to that 
satisfies the equation 

= 1 + qp(k)p rnodp^. (2) 
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Here, we are interested in the number of the first consecutive zeros of this quotient, that 
is 

Kp :=min{q e N|qp(q) /O}. (3) 

For a long time this integer was closely related to first case of Fermats Last Theorem, but 
we will not go into this here (see [2] and the references given there). 

It has been shown in [2] that 

Kp e 0(Vp), (4) 

and it is still an open question, whether this bound is tight. The following Conjecture 
lowers this bound for infinitely many primes: 

Conjecture 1 For all e > there exist infinitely many primes p with Kp < ey^. 

Now, let p be again an odd prime and Cp2 := e^^'^'^^^ a primitve p^-th root of unity. 
Further, denote by Q(rp)/Q the real subfield of Q(Cp2) of degree p, where Pp is given by 

rp:= Y_ C^2, (5) 

with a e G(Q(Cp2)/Q) ~ (Z/p2z)x. 

The aim of this article is to prove the following theorem: 

Theorem 1 At least one of the following is true: 

1. For all positive integers t G N, there exist a constant Ct and a quantum algorithm 
that, given an odd prime p, computes in (logp)'^* steps and with a probability close 
to 1 an element of the set MAXPp^f 

2. For all e > there exist infinitely many primes p with Kp < e-^/p. 

The paper is organized as follows. In the next section, a quantum algorithm is presented 
that attempts to compute an element of the set MAXPp^t in quantum polynomial time, at 
least if Conjecture [T] is false. Then, after recalling some basic facts from number theory, 
we will state the proof of the Theorem. 
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2 The Algorithm 

In the following let p be an odd prime. To present the algorithm, we define a polynomial 
time computable function f : Z — > Z by 

where c|p(x) denotes the Fermat quotient of the integer x, defined in the last section, 
(i) For the quantum part of the algorithm, we start with the state 

1 Y_ Ix)|f(x)) (7) 

^ x=0 

and (ii) apply the Quantum Fourier Transform (QFT) to the first register, which leads to 

Y_ C^?|a)|f(x)). (8) 

^ a,x=0 



(iii) We now measure the system and obtain the state |a)|s) with probability 

(9) 



1 ^ 2 
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f(x)=s 



(iv) If a ^ modp and s 7^ p, we note down the smallest nonnegative integer a' that 
satisfies the equation 

a' = qp(a) + s modp. (10) 

For a constant c, to be specified later, we repeat the whole process (logp)'^ times and 
output the integer a' that has occured most frequently (in case of a tie we choose one of 
the "leaders" by random). 



In order to obtain the desired element a € Gp := G(Q(rp)/Q), wc define the 



group homomorphism jp : Z — > G(Q(Cp2)/Q) such that jp(a)(Cp2) := C\ and set 



3 Analysis 

For the analysis of the algorithm, we will begin with two Lemmata stating the probabilities 
of the possible outcomes of step (iv) of the quantum subroutine from the last section: 
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Lemma 1 The probability that step (iv) produces some integer equals 1 — 




Proof. Let |a)|s) be the state given after the measurement m step (hi) of the procedm'e. 
We will collect the probabilities for the event s = p or a = kp, with k G {0, 1 , . . . ,p — 1}: 

s = p and a 7^ kp: The probability for this event equals 0, since by definition of 
the function f the inner sum of equation ([9]) equals ^J?Zq Cp^ = 0. 

s = p and a = kp: Here, the inner sum of equation ([9|) is equal to p and since 
there are also p possibilities for the integer k, the probability for this event equals ^. 

s 7^ p and a = 0: In this case, the value of the inner sum equals p — 1 , and since 
there are p possible values for the integer s the probability here is ^^^4^^ . 

s 7^ p and 7^ a = kp: In this setting, the inner sum equals the trace of the ele- 
ment Cp and is therefore equal to —^. Again, there are p possible values for s and p — 1 

values for the integer k, so that in summary this probability equals ^^^4 

Finally, the sum of these probabilities leads to the statement of the Lemma. □ 



Lemma 2 The probability Pr(a'), that in step (iv) the integer a' is recorded, satisfies 



Pr(o-') = 




where a := jp(o-')|Q(rp)- 

Proof. Let w be an integer, with (w — 1 ,p) = 1 and w^^^ = 1 modp^. Then any integer 
k ^ modp can be written in the form 

k = w'l'<(1 -qp(lc)p) modp^, (12) 
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for some integer di<. Now suppose that at the end of step (hi), we obtain a state |a)|s), 
with a ^ mod p and s 7^ p . It then follows that the inner sum of equation ([9]) equals 

with a := jp(qp(a] + s)|q(p j, by definition of the element Pp. Since there are p(p — 1) 
ways which lead to the same a, the statement of the Lemma follows. □ 

4 Proof of the Main Theorem 

To state the proof of Theorem [U we first define the Mirimanoff polynomial 



Tp(t]:=^y. (14) 

i 1 ^ 



This polynomial is closely related to the Fermat quotient, since 

yp(t) ^ ^ -t^-(1 -tF ^ „ -, _ -, ) _ ^q^(^) (^5) 

and therefore 

Kp = min{n > |yp(n) ^0 mod p}. (16) 
For an introduction Mirimanoff polynomials and their basic properties, we refer to [2]. 

If we denote the zeros of yp modulo p by r\p it can be shown that: 

Theorem 2 There exist positive constants Ci and Cz such that for all primes p 

< Cirip < ClPmax.p. (17) 

Proof. The first inequality is given by Theorem 1 in |2j, while the second is shown in 
Prop. 3.16. □ 

Now, in order to prove Theorem [H we look at the following statement: 

Statement 1 There exist positive integers s,po € N such that, for all primes p > po, 

Pmax.p > 7-j rr- (18) 
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It now follows immidiately from Theorem [2] that Conjecture [T] is true, if Statement [T] is 
false. So, from now on, we will assume that Statement [1] is true. From this. Lemma [2] 
gives us 

1 \ /r \ ^ / 1 \ 1 



Further, we define for each cp G G(Q(rp)/Q) the real number a^p by |r^| = (X^pFjnax.p and 
(again) cp' by cp = jp(cp')|Q{rp)- 

Finally, calling the algorithm (logp)^ times, where k > max{t + 10,12 + 4s}, and 
demanding that the difference of the expected values of o'^^^ and cp' lie above a certain 
bound, 

(logp)^ (l - ^) (^)' - (logP)'' (l - ^) < (^)' > (logP)'^'^^'- (20) 
it follows that 

(logp)'^ 

This completes the proof of Theorem [TJ 
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